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produced either centrally in the exchange 34 or in server 
system 70, and sent to said PC 50. Said PC 50 then combines 
the received franking mark with possible other information and 
prints this on the postal article 22 with the aid of printer 
62. In that case, instead of working with the storage of a 
balance for electronic stamps on bank card 18, one franking 
mark per time is retrieved from the exchange 34. In this 
case, payments of electronic postage stamps preferably take 
place directly either by debiting a user's bank balance, or 
from bank card 18 with an electronic purse. To contend with 
possible fraud, the user must uniquely identify himself, for 
example with his giro/bank number and an associated PIN. 
Preferably, identification then still takes place with bank 



card 18 and by checking a PIN code.-- \ 



IN THE CLAIMS; 



Amend the claims as follows: 



--2. (amended) The method according to Claim 1, 
wherein prior to step c, t/he unique bit string and the 
identification code, protect/ed with the aid of a first message 
authentication code or prc/tecteyfl qfy encoding, are stored by a 
terminal on an information carrier with memory, and step c 
takes place after the /reading &f_ U ft€ information carrier by a 
printing device . -- 
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--3. (amended) The method according to Claim 2, 
wherein besides the unique bit string /and the identification 
code, a terminal identification code/ protected with the aid 
of the first message authent icat iocf code or by the encoding, 
is also stored on the information carrier with memory by the 
terminal . -- 




--4. (twice amendeaf) The method according to Claim 
2, wherein after the reading of the information carrier by the 
printing device, use of the unique bit string for printing a 
further franking mark yon a further document is rendered 
impossible by the printing device. — 



--5. (twice amepf£ie\i) The method according to Claim 
2, wherein after / readi/ng (the information carrier, it is 
checked whether ^the va/lue of a counter on the information 
carrier lies wi*thin prec fef - i rfed limits, and, if this is the 
case, the value of the counter is adjusted after reading and 
step c is executed, and, if this is not the case, step c is 



blocked . -- 



L 




IS 



--6. (amended) The method according to Claim 1, 
wherein/ upon execution of step c, use is made of a computer 
and a yprinting device connected thereto.— 
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— 7. (twice amended) The mart hod according to Claim 
1, wherein the identification code /comprises a user identi- 
fication code or a printer identification code.— 

--8. (twice amended) Tne method according to Claim 1, 
wherein on the basis of the pranking mark a second message 
authentication code is calculated and that this also is 
printed or the franking mar If is printed in encoded form.-- 
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--9. (twice amended) The method according to Claim 
1, wherein the set of uiYique bit strings is stored in a first 
central memory, used combinations of identification codes and 



unique bit strings j 
franking marks printed 
of identification /codes 
present in the re 



stored in a second central memory, 
n documents are read in, combinations 
and unique bit strings which are 
anking marks are stored in a third 



central memory amd are compared to the used combinations in 
the second central memory.-- 
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--1I. The system for printing a franking mark 
according Claim 10, wherein said system comprises a 

/J terminal anp a printing device, said terminal being arranged 

to store, prior to step c, the unique bit string together with 
the identification code, protected with the aid of a first 
message /authentication code or protected by encoding, on an 
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information carrier with memory, anA the printing device is 
arranged to execute step c aftey reading the information 
carrier . -- 

--12. (amended) The System according to Claim 11, 
wherein the terminal is arranged to send a copy of either the 
unique bit string together with the identification code and 
the first message authentication code, or the unique bit 
string and the identification code in encoded form, to an 
exchange . -- 

— 13. (twice amended) The system according to Claim 
11, wherein the terminal is arranged to store also, besides 
the unique bit string/and the identification code, a terminal 
identification code/ protected with the aid of the first 
message authentication code or protected by encoding, on the 
information carrier with memory.— 



--14. Atwice amended) The system according to Claim 
11, wherein ther printing device is arranged, after reading the 
information carrier, to render use of the unique bit string 
for printing/ a further franking mark on a further document 
impossible . /- 
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--15. (twice amended) Thd system according to Claim 
11, wherein the printing device is/arranged, after reading the ' 
information carrier, to check whfether the value of a counter 
on the information carrier lies/within predefined limits, and, 
if this is the case, to executfe step c and to adjust the value ; 
of the counter after reading/ and, if this is not the case, to 
block step c . -- 



--16. (amendej) The system according to Claim 10, 
further comprising a computer and a printing device connected 
thereto for executing/step c.-- 



--17. j^ra^pded) The system according to Claim 16, 
wherein the system i's provided with means arranged remotely 
from the comput^y to send the unique bit string, together with 
the identif ica^Von cod^<^ protected with a first message 
authentication/ code or protected by encoding, to said computer 
and to send al copy of said data to an exchange.— 



t-18. (amended) The system according to Claim 16, 
wherein tbie computer is provided with means to print, with the 
aid of t/he printing device, the unique bit string together 
with the identification code, protected with a first message 
authentication code or protected by encoding, on the document, 
and optionally to send a copy of said data to an exchange. 
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--19. (twice amended) The /system according to Claim 
10, wherein the identification codfe comprises a user identi- 
fication code or printer identification code.-- 

--20. (twice amended/ The system according to Claim 
10, wherein the system is arranged to calculate and print, on 
the basis of the franking mark, a second message 
authentication code or to yjprint the franking mark in encoded 
form. -- 



--21. (twice/ amended) The system according to Claim 
10, wherein the system further comprises a second central 
memory for storing Vcombinat ions of identification codes and 
provided unique bit syrirgs, central input means for inputting 
franking marks p/intifed dsn documents, a third central memory 
for storing the combinations of identification codes and 
unique bit stri/ngs pX^ent^ifi the inputted franking marks, and 
processor meayis, connected to the central input means and the 
first, second, and third central memories, for mutually 
comparing ttte data in the second and third central memories. -- 



--22. (amended) A central station comprising: 

a first central memory, with a set of unique bit 



strings', 
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a second central memory for sftoring combinations\of 
identification codes and provided unique bit strings, said 
combinations corresponding with f/anking marks which are 
printed on a document, 

central input means f^r inputting franking marks 
printed on documents, 

a third central memc^ry for storing combinations of 
identification codes and unique bit strings present in the 
inputted franking marks, ano 

processor means/ connected to the central input 
means and the first, second, and third central memories, for 
mutually comparing datyfe in the second and third central 



memories . -- 
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--23. (amended) A device for printing a franking 
mark on a documenty said device including means for receiving 
data from an information carrier, said data at least 
comprising a unique bit string originating from a set of 
unique bit strings, for compiling and making data available 
for the franki/g mark for the document in protected form, so 



that said device can print the franking mark on the document 
securely, sa'id franking mark at least comprising said data as 



well as an /identification code.-- 
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